Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99817241-022c-43d1-af8e-8c4be7d32bdb.roa
File:                     99817241-022c-43d1-af8e-8c4be7d32bdb.roa (raw, json)
Hash identifier:          WtTi76dc0DGv2XJnnMdXBmzBB5C1NuScxNJDSEkEAA8=
Subject key identifier:   8A:60:AE:D8:1E:9E:79:F0:BF:C9:18:41:54:40:EE:F7:7E:71:FB:CC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       23BCC6C130EA829A3AF2198F84EB98113F32BF8F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99817241-022c-43d1-af8e-8c4be7d32bdb.roa
Signing time:             Sat 18 Oct 2025 04:00:07 +0000
ROA not before:           Sat 18 Oct 2025 04:00:07 +0000
ROA not after:            Sat 22 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.8.151.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:bc:c6:c1:30:ea:82:9a:3a:f2:19:8f:84:eb:98:11:3f:32:bf:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 04:00:07 2025 GMT
            Not After : Nov 22 23:59:59 2025 GMT
        Subject: serialNumber=146bacf08dc79139c8cba5ebf85a8d40de259bea16af2cc035b4758641ab9fcd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ef:09:ed:da:79:b2:43:bb:9c:01:57:65:5e:
                    b8:41:7c:27:c7:cd:86:7a:92:67:f8:91:4f:f4:6c:
                    89:d6:c3:ad:3b:b1:18:6e:26:3a:65:c9:01:4d:31:
                    b7:12:9e:ab:54:b7:7b:ed:ac:2e:e8:3f:51:eb:b9:
                    bf:90:3d:8a:62:f4:0b:d2:62:d1:31:5d:7a:4c:0f:
                    b1:cf:d5:14:7f:2a:62:8a:ca:16:c4:e5:c3:00:5f:
                    1e:a2:e8:0a:87:c1:6b:12:44:d7:6b:76:84:8f:46:
                    0d:46:65:62:58:16:d9:bd:a1:9c:62:ac:05:66:8d:
                    3e:fe:93:2a:b9:f6:b5:84:e1:1f:5d:04:a8:77:ce:
                    2c:78:8b:5d:1a:af:42:36:bd:05:c1:f8:51:70:64:
                    ac:ce:cd:17:27:08:92:98:0b:44:8b:6f:c6:7f:78:
                    89:82:2a:c6:92:7a:68:af:8b:02:d2:96:c7:43:74:
                    5c:6a:2a:5f:b4:3b:c5:3f:02:a7:04:ed:c5:e1:ad:
                    35:3c:f2:4a:a4:ab:18:b7:44:38:34:29:c3:3d:01:
                    a3:77:cb:29:ce:54:b0:5a:6e:11:ef:85:04:97:1a:
                    af:29:41:9d:62:25:b6:09:47:ca:5f:c6:65:11:58:
                    c6:2b:00:87:e3:d5:df:4f:0e:dd:dc:50:28:0a:36:
                    86:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:60:AE:D8:1E:9E:79:F0:BF:C9:18:41:54:40:EE:F7:7E:71:FB:CC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99817241-022c-43d1-af8e-8c4be7d32bdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.8.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:8e:44:49:46:f5:c6:38:15:4c:b4:99:51:f2:7e:65:04:ca:
         6f:7a:9e:d5:6f:d7:61:5f:64:17:fd:dc:b9:2b:73:82:1b:25:
         20:da:b0:29:ea:b3:bf:96:e8:a8:cc:b1:0c:4d:69:ba:9d:28:
         45:51:6f:be:f6:ee:d7:67:e6:b6:a5:42:40:60:80:07:a3:f2:
         a1:c8:84:3f:17:ae:bd:f3:f4:1d:17:96:b6:b3:3b:d7:25:c1:
         a4:a5:d9:88:6c:6a:a7:40:45:7c:fb:84:a4:c6:f1:64:ee:49:
         7b:81:df:18:cc:14:06:c0:ce:cb:67:e9:3f:88:02:33:59:5e:
         0c:53:8c:af:f3:2f:4d:32:8a:00:cf:66:cc:26:e8:18:cf:77:
         cb:47:5f:fe:b9:b0:61:f6:66:88:36:cf:c2:fb:25:07:8a:1b:
         6a:97:38:0c:cd:39:3a:5e:a7:9d:ed:85:7c:7d:98:2d:99:79:
         ed:3a:90:57:dd:b9:63:6b:27:a2:52:96:1a:66:e9:5f:ed:d4:
         58:74:0e:1d:5a:bf:5d:c0:e7:d8:f5:9e:27:4d:3c:8f:7b:f7:
         b1:e7:53:f9:11:20:94:eb:14:aa:ee:72:98:95:ce:bc:c5:1d:
         ed:63:0b:68:26:86:7d:77:c8:79:57:9b:ae:81:18:aa:c9:f8:
         01:a3:56:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----